Re: kvm (Proxmox) and Openbsd 5.1

2012-10-15 Thread Tobias Crefeld
Am Sat, 21 Jul 2012 12:50:55 +0200 schrieb Holger Glaess gla...@glaessixs.de: i run 2 guests with 5.1 on proxmox 2.1 distribution . i don't know what the version of kvm is behind of proxmox. but openbsd 5.1 run as expected normal ;) I tried several OpenBSD versions between 4.8 and 5.1,

Re: CARP and transit network to ISP

2012-08-22 Thread Tobias Crefeld
Am Tue, 21 Aug 2012 21:28:27 -0400 schrieb Jason Healy jhe...@logn.net: By changing to a /30 transit and doing away with the aliases, performance on the OpenBSD box improved substantially. Not sure, if I understand you right: Did you move the /23 on another ethernet interface when establishing

Re: CARP + OSPF help needed

2012-08-21 Thread Tobias Crefeld
Am Fri, 17 Aug 2012 15:45:31 -0400 schrieb Brian Hechinger wo...@4amlunch.net: I'm trying to replace my single OpenBSD firewall with a pair of redundant firewalls. I've been testing this (thanks to the power of VMware) and so far haven't gotten it to work the way I want/need. [..] I'd like

CARP and transit network to ISP

2012-08-17 Thread Tobias Crefeld
Can anyone give me a hint how to setup a pair of CARPed firewall machines to access an ISP via an direct ethernet link (fiber). He assigned us a customer network ( /29) and a transit network ( /30) to connect our (customer) network with his backbone without extra router machine. All (active)

Re: MPLS VPN on OpenBSD

2012-04-27 Thread Tobias Crefeld
Am Fri, 27 Apr 2012 17:46:38 +0530 schrieb Girish Venkatachalam girishvenkatacha...@gmail.com: While someone actually writes an article on undeadly on VPNs please also write about MPLS VPN creation as I find no documentation about this. Usually you don't need this if you are not the

Re: VPN on OpenBSD: OpenSSH or OpenVPN?

2012-04-16 Thread Tobias Crefeld
Am Mon, 16 Apr 2012 22:35:16 +0300 schrieb Kostas Zorbadelos kzo...@otenet.gr: if this has been discussed in the past, forgive my asking and please point me to the archives. I am interested in building a server VPN solution for a sensitive corporate LAN. The use case is travelling, roaming

Hardware Compatibilty on different *nixes

2011-12-02 Thread Tobias Crefeld
Am Fri, 02 Dec 2011 06:13:42 -0500 schrieb Richard Thornton thornton.rich...@gmail.com: I wanted to use a linux but the only current linux for sparc64 is debian 6.03 and it seems incompatible with the rage xl video on the sun blade giving me out of sync errors. Openbsd seems to have better

Re: snort and pf - pflog vs if

2011-11-14 Thread Tobias Crefeld
Am Sun, 13 Nov 2011 09:51:05 -0600 schrieb Ted Wynnychenko ted@comcast.net: With 4.5, I had snort listening to pflog0, because I understood that listening to the interface directly (e.g. bge0) would not work since any packets dropped by pf would not be seen by snort. pflog0 only shows the

RfC-1323-Test for pf/NAT-Installation

2011-11-10 Thread 'Tobias Crefeld'
Running a pair of OpenBSD-4.8-boxes as NAT-Firewall between public Internet and some Linux-webservers in a DMZ basically works fine so far. But this week a client enabled RFC-1323 and his http/https-access to our webservers didn't work any more and all he got was an ICMP-unreachable with un-NATed

Re: My thoughts on OpenBSD - is advocacy working ?

2011-09-01 Thread Tobias Crefeld
Am Wed, 31 Aug 2011 14:48:56 -0400 schrieb Daniel Villarreal yclwebmas...@gmail.com: I was posting to advoc...@openbsd.org, but only SPAM seems to function on that list? Well, for whatever reason it ended at b...@openbsd.org ... Beside the question what kind of encryption your MUA is using...

XEN-Guest

2011-05-02 Thread Tobias Crefeld
I think about installing an OpenBSD-guest on a XEN-Host (Debian Squeeze), all OS as 64bit-version alias amd64. Are there any experiences with OpenBSD as Dom-U? The guest will be a firewalling-router with ospfd, bind, openvpn and 6 ethernet-interfaces. Any comments are welcome! Regards,

Re: XEN-Guest

2011-05-02 Thread Tobias Crefeld
Am Mon, 2 May 2011 11:15:57 -0500 schrieb John Jackson open...@lacutt.com: It's probably much more straightforward to run kvm-qemu instead of XEN. Hm, I'll consider this alternative. Till now our test-LAN ran on VMware but for some reasons we want to get away from VMware. OpenBSD works

Re: XEN-Guest

2011-05-02 Thread Tobias Crefeld
Am Mon, 2 May 2011 19:40:23 +0200 schrieb Tobias Crefeld t...@cataneo.eu: $ grep flags /proc/cpuinfo |head -1 flags : fpu de tsc msr pae mce cx8 apic mtrr mca cmov pat clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt lm 3dnowext 3dnow constant_tsc rep_good nonstop_tsc